Connect with us
Client Portals
Employers can access significant employee data, but legal limits depend on context, purpose, and jurisdiction. U.S. employers generally have broad rights to monitor workplace systems and collect job-related information, especially with clear policies reducing…
Connecticut’s 2025 enforcement report on the Connecticut Data Privacy Act (CTDPA) highlights increasing regulatory expectations for businesses handling personal data. The report identifies common consumer complaints, including failures to honor data rights requests,…
New U.S. Department of Justice regulations implementing Executive Order 14117 will restrict transfers of Americans’ bulk sensitive personal data to certain foreign countries due to national security concerns. The rule limits data brokerage and certain transactions…
As businesses collect increasing amounts of personal information — like names, emails, and payment details — the risk of cyberattacks and data breaches grows, making data protection essential. It stresses that clear data protection and privacy policies, required by…
The Indiana Consumer Data Protection Act (CDPA) took effect on January 1, 2026, and the Indiana Attorney Generalis now enforcing it through consumer complaints and proactive investigations. The law regulates how coveredbusinesses collect, use, disclose, store, and…
Connecticut’s legislature amended the Connecticut Data Privacy Act (CTDPA) through Senate Bill 1295, with mostchanges taking effect July 2026. The revisions broaden the law’s scope by lowering applicability thresholds, expandingsensitive data definitions (such as…
New Jersey recently amended its comprehensive state privacy law, adopting changes similar to other state privacyupdates. The revisions, which took effect upon the governor’s signature, adjust definitions and exemptions in the law.Notably, the updates expand the types…
The U.S. state privacy landscape expanded in 2026 with new comprehensive data privacy laws in Indiana, Kentucky,and Rhode Island that grant consumers rights over personal data and require opt-in consent for sensitive information.In California, updated CCPA regulations…
California Governor Gavin Newsom and the California Privacy Protection Agency launched the Delete Request andOpt-out Platform (DROP), a first-of-its-kind privacy tool that lets California residents send a single request to registereddata brokers to delete their…
Privacy impact assessments (PIAs in the U.S., DPIAs under the EU GDPR) are essential tools for effective privacyprograms. They help organizations identify, assess, and mitigate privacy risks before data processing begins andsupport regulatory compliance. Growing U.S….